Steward Privacy Policy

Last updated: October 22, 2026

About this policy

Steward is a private beta for tracking routines and sharing selected progress with a partner or groups. This policy describes the current app and is available before sign-in and in Settings. The app owner is responsible for operating this beta.

Your account

You can explore without signing in by choosing Continue as a guest. Guest habits and journal data stay on this device and are kept separate from any account. Signing in does not automatically upload or import guest progress.

You sign in with Apple or Google. Supabase Auth receives a provider identifier, an email address when available, and any basic profile information you authorize the provider to supply. Apple may provide a private relay email address. Steward does not receive your Apple or Google password.

Your sign-in session is stored on your device so you can return to your account. Use the same sign-in method on each visit; a different provider or an Apple relay address may lead to a separate account.

Information you choose to save

Your account can store habits, schedules, checkoffs, activity dates and titles, notes, optional activity details, plans, and optional mood and energy check-ins. Reading, faith, relationships, and nutrition entries may include sensitive personal information. Only enter information you want stored.

Your chosen profile name, nickname, and optional cropped profile photo are saved with your account. Usernames, friendships, partner connections, group memberships, invitations, shared habits, check-ins, and shared activity copies are stored to provide those features.

Signed-in accounts choose a unique username. Other signed-in people who enter your exact username can find that username and send you a friend request. Pending requests are stored until accepted, declined, cancelled, or an account is deleted. Your username is not your private journal name, email address, or password.

We use this information to save and synchronize your journal, show your progress, and provide the sharing features you choose.

Who can see shared information

Personal habits are private. A connected partner can see your username and profile photo. Usernames are visible to the friends and group members involved in those features.

A personal activity becomes visible to your connected partner when you turn on Share with my partner. This includes its notes, details, and any mood or energy check-in. An activity left shared can be visible to a future connected partner until you turn sharing off or delete it.

Partner-space habits, check-ins, and posts are visible to the two people in that connection. Group habits, check-ins, and posts are visible to current members, including people who join later. Group owners can remove group posts. Invitations should be sent privately.

Sharing an activity into a partner or group space creates a separate copy. Editing or deleting the personal original does not automatically update or remove that copy. Other members may already have viewed or saved shared information.

Apple Health

Apple Health is optional and available in a compatible installed iPhone build. With your permission, Stats can read steps, walking and running distance, active energy, exercise minutes, and your latest recorded and resting heart rate. After setup, Stats remembers your connection and refreshes these readings when you return. The combined Health card is at the bottom by default; you can choose which readings it displays and arrange the Stats sections. You can stop automatic refresh from Stats. Heart-rate readings are recorded measurements, not live monitoring.

Personal Health readings are displayed on your device. They are not automatically uploaded or shared. In a partner or group space’s Steps tab, you can separately read a daily step total, preview it, and explicitly share it with that space. This uploads only the total, shared day, reading time, sharing time, and account/space identifiers to Supabase. Heart rate, distance, energy, and exercise readings are not uploaded by this feature. We do not sell Health data, use it for advertising, or write to Apple Health.

The daily step leaderboard uses the space’s shared time zone and day so totals cover the same period. This can differ from the Today total on your device. Current members, including people who join later that day, can see a shared total. Totals are supplied by members’ devices and are not independently verified. Sharing is off until you publish each total; refreshing personal Stats never posts to a leaderboard. You can remove your shared total from that space. One latest snapshot per person/space is retained until replaced, removed, or deleted with the account, membership, or connection. Historical totals are not shown in the leaderboard.

You can use the app without Health access. You can change Health permissions in Apple's Health or Settings app. Missing readings may reflect unavailable data or permissions. Manually typed health or workout information is journal content and follows your journal sharing choices.

Information kept on your device

The app caches account data locally for loading and access between requests. Guest journals, color themes, notification preferences, reusable saved activities, session timers, and whether you completed or skipped the quick-start guide are also stored on the device. Habit, plan, and weekly recap reminders are scheduled locally through the operating system.

Signing out hides account screens and ends the app's current sign-in, but it does not delete your cloud account or necessarily erase cached data from device storage. Older guest journals stay separate and are not automatically uploaded. Device or browser backup and storage behavior is controlled by your operating system or browser.

Services used to run the app

Supabase provides authentication and cloud data hosting. Apple and Google process sign-in according to their own policies. Expo distributes builds and app assets; Apple TestFlight distributes the beta and may collect testing diagnostics under Apple's policies. These services may process network information, such as IP addresses, and operational logs to provide and secure their services.

If you enable social push notifications in an installed build, Supabase stores a device registration, Expo push token, selected social alert types, sound preference, and the associated sign-in session. Expo Push Service and Apple or Google deliver general notifications about friend requests and shared-space updates. Journal titles, notes, mood, and Apple Health readings are not sent in notification content. Ending a sign-in session removes its device registrations. General in-app notification history is retained for up to 30 days; inactive device registrations are removed after 90 days.

Steward does not include an advertising network, sell personal information, or send journal content to an AI service. App data is transmitted over encrypted connections and database access is restricted by account and membership rules. This is not an end-to-end encrypted journal; the app owner and authorized service operators may access stored data when needed to operate, support, or secure the service.

Retention and deletion

Cloud account data is retained while your account exists unless you delete particular items or request deletion. Deleting a personal activity does not delete a separately shared copy. Leaving a group removes your access but may leave group posts and check-ins for remaining members. Disconnecting a partner deletes that connection's partner-space records; it does not delete either person's personal journal.

To permanently delete your account, open Profile → Settings → Your account → Delete my account and type DELETE to confirm. Apple accounts also require confirmation with Apple on iPhone. Contact support if you cannot access your account; we may need to verify ownership before acting on a request.

Account deletion removes your cloud journal, profile, habits, checkoffs, shared posts, invitations, friendships, and memberships. Groups you own and their content are deleted for all members. Your partner connection and its shared space are deleted too. Other people's personal journals remain. Habit templates you created in groups owned by others remain without your account attached.

After confirmed deletion, this account's cached journal, reusable activities, and timer are removed from the requesting device. Other devices can retain cached copies. Device-wide themes and reminders, and older guest journals, remain. Signing in afterward creates a new empty account.

Operational logs and any service backups may remain until the applicable service retention period ends. We cannot retract screenshots or other copies saved by people you shared with. Removing this app does not delete your cloud account or Apple's original Health records.

Your choices and contact

Choose what to log and share. You can remove a profile photo, stop sharing an activity, leave a group, disconnect a partner, disable reminders, and revoke Health permissions. Revoking Apple or Google access does not by itself delete data already saved in Steward.

Contact the Steward app owner at [email protected] for help, privacy questions, or a request to access, correct, or delete your data.

This policy will be updated as the beta changes. The current revision date appears at the top of this page.